Route Origin Authorization

$ rpki-client -vvf rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
File:                     3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          TyAVv6RsH+kOJvekPkLwKIE+B8MOk0QmeDJMgC3NkZI=
Subject key identifier:   2F:CB:BD:AF:EE:A8:65:F4:3E:04:AD:D4:C6:03:17:F3:A6:67:90:1D
Certificate issuer:       /CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
Certificate serial:       4A9309C7F3D4E9F3232DE1A303474D47CA5FA5F0
Authority key identifier: 61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer
Subject info access:      rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa
Signing time:             Sat 22 Oct 2022 04:33:24 +0000
ROA not before:           Sat 22 Oct 2022 04:28:24 +0000
ROA not after:            Sat 21 Oct 2023 04:33:24 +0000
asID:                     43260
IP address blocks:        185.245.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:93:09:c7:f3:d4:e9:f3:23:2d:e1:a3:03:47:4d:47:ca:5f:a5:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61994ee93babe60c13e04487fa5cd34fd23fc93f
        Validity
            Not Before: Oct 22 04:28:24 2022 GMT
            Not After : Oct 21 04:33:24 2023 GMT
        Subject: CN=2FCBBDAFEEA865F43E04ADD4C60317F3A667901D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:67:be:0c:cd:fb:c6:fe:7e:65:87:94:b2:07:
                    7b:15:a6:1e:c2:ee:2c:4a:f8:69:71:72:58:b1:09:
                    d8:5b:72:6e:b9:f7:ea:36:fa:40:5c:88:7f:fb:e9:
                    cb:3a:49:85:1d:55:2a:75:29:ff:6a:a2:62:00:ea:
                    63:2a:b3:ef:ab:3a:29:01:3f:f1:08:8b:ab:7c:2b:
                    f2:9a:00:cc:5d:71:b6:fd:71:6f:96:e7:8b:42:49:
                    43:60:df:c5:c2:3e:16:b8:cc:38:a8:8b:72:03:2e:
                    ca:b4:59:74:e0:ac:16:83:08:f7:28:5e:f7:a9:0b:
                    66:d0:00:4c:18:b5:0e:08:93:1c:b6:9d:31:51:a5:
                    26:9a:45:ca:6e:63:e6:ba:26:1f:c6:9c:27:c3:21:
                    01:27:3d:4d:25:50:7d:19:ff:c7:e3:df:06:8a:bd:
                    69:cb:81:cb:52:8f:3a:92:d8:51:14:28:be:c5:4d:
                    c6:6b:de:49:72:f1:14:af:22:73:4b:8e:76:18:9e:
                    8f:00:62:d3:e5:b0:1e:88:75:57:b5:3b:40:67:f6:
                    02:74:48:e6:25:33:2c:9a:bf:cb:5f:04:2c:f6:67:
                    f9:69:04:58:fa:64:7d:31:29:0f:ad:19:1a:ee:1b:
                    e9:51:87:b9:4c:a9:71:54:d4:ea:72:c2:88:dd:ff:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CB:BD:AF:EE:A8:65:F4:3E:04:AD:D4:C6:03:17:F3:A6:67:90:1D
            X509v3 Authority Key Identifier:
                keyid:61:99:4E:E9:3B:AB:E6:0C:13:E0:44:87:FA:5C:D3:4F:D2:3F:C9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/61994EE93BABE60C13E04487FA5CD34FD23FC93F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YZlO6Tur5gwT4ESH-lzTT9I_yT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki1.terratransit.de/repo/TerraTransit/6/3138352e3234352e3138312e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:24:03:a7:3f:fc:34:f6:88:86:2b:81:4b:e1:a4:08:50:05:
         71:4f:6f:0e:bd:02:89:bc:56:73:4d:a3:88:86:39:2f:7f:fe:
         69:a1:5d:ad:52:55:97:31:c0:bf:5f:b7:55:2c:b6:a0:9d:9b:
         b3:48:ce:41:b1:67:87:f7:5e:1c:62:b7:ab:92:0a:52:bf:ac:
         06:bb:b9:fc:82:a8:d2:f3:94:77:f9:b5:07:cf:61:75:38:8c:
         30:af:cc:b2:aa:35:64:e1:35:6e:8e:1d:b9:2b:aa:35:aa:aa:
         4c:95:db:99:56:b3:0a:8c:a0:11:3e:4a:a8:70:94:cc:5d:cd:
         88:a3:c2:e4:c7:97:1f:ba:24:8a:a2:cd:19:c5:91:fa:b2:7a:
         31:cf:c5:ad:b7:69:25:e6:e3:3b:a8:1c:18:a7:36:bb:1c:ac:
         6d:da:2d:95:4e:0a:10:3f:50:4a:9b:24:ff:99:07:06:b7:b9:
         75:57:25:b1:a9:33:a4:dd:29:04:f6:be:2f:6d:b4:95:94:c4:
         29:2b:e9:aa:d4:b6:75:69:9e:a3:1e:e7:b3:b0:56:06:8c:62:
         11:81:22:62:7b:5e:a5:2c:3b:a0:72:85:16:0f:b2:ef:08:81:
         bd:fe:62:8b:34:3a:cf:db:6e:7e:ee:52:84:f6:8a:c1:5a:85:
         16:a0:e3:47
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUSpMJx/PU6fMjLeGjA0dNR8pfpfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE5OTRlZTkzYmFiZTYwYzEzZTA0NDg3ZmE1Y2QzNGZk
MjNmYzkzZjAeFw0yMjEwMjIwNDI4MjRaFw0yMzEwMjEwNDMzMjRaMDMxMTAvBgNV
BAMTKDJGQ0JCREFGRUVBODY1RjQzRTA0QURENEM2MDMxN0YzQTY2NzkwMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlZ74MzfvG/n5lh5SyB3sVph7C
7ixK+GlxclixCdhbcm659+o2+kBciH/76cs6SYUdVSp1Kf9qomIA6mMqs++rOikB
P/EIi6t8K/KaAMxdcbb9cW+W54tCSUNg38XCPha4zDioi3IDLsq0WXTgrBaDCPco
XvepC2bQAEwYtQ4Ikxy2nTFRpSaaRcpuY+a6Jh/GnCfDIQEnPU0lUH0Z/8fj3waK
vWnLgctSjzqS2FEUKL7FTcZr3kly8RSvInNLjnYYno8AYtPlsB6IdVe1O0Bn9gJ0
SOYlMyyav8tfBCz2Z/lpBFj6ZH0xKQ+tGRruG+lRh7lMqXFU1Opywojd/ys1AgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUL8u9r+6oZfQ+BK3UxgMX86ZnkB0wHwYDVR0j
BBgwFoAUYZlO6Tur5gwT4ESH+lzTT9I/yT8wDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vcnBraTEudGVycmF0cmFuc2l0LmRlL3JlcG8v
VGVycmFUcmFuc2l0LzYvNjE5OTRFRTkzQkFCRTYwQzEzRTA0NDg3RkE1Q0QzNEZE
MjNGQzkzRi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov
L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1labE82VHVyNWd3VDRF
U0gtbHpUVDlJX3lUOC5jZXIwgYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4Zu
cnN5bmM6Ly9ycGtpMS50ZXJyYXRyYW5zaXQuZGUvcmVwby9UZXJyYVRyYW5zaXQv
Ni8zMTM4MzUyZTMyMzQzNTJlMzEzODMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzQzMzMyMzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALn1tTANBgkqhkiG9w0BAQsFAAOCAQEAySQD
pz/8NPaIhiuBS+GkCFAFcU9vDr0CibxWc02jiIY5L3/+aaFdrVJVlzHAv1+3VSy2
oJ2bs0jOQbFnh/deHGK3q5IKUr+sBru5/IKo0vOUd/m1B89hdTiMMK/Msqo1ZOE1
bo4duSuqNaqqTJXbmVazCoygET5KqHCUzF3NiKPC5MeXH7okiqLNGcWR+rJ6Mc/F
rbdpJebjO6gcGKc2uxysbdotlU4KED9QSpsk/5kHBre5dVclsakzpN0pBPa+L220
lZTEKSvpqtS2dWmeox7ns7BWBoxiEYEiYntepSw7oHKFFg+y7wiBvf5iizQ6z9tu
fu5ShPaKwVqFFqDjRw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:41 2023 by rpki-client on console-ams.rpki-client.org